The Agent Skills Directory

[SAFE]: The skill implements secure webhook handling practices. Evidence: Examples in examples/express/src/index.js, examples/fastapi/main.py, and examples/nextjs/app/webhooks/shiphero/route.ts utilize crypto.timingSafeEqual or hmac.compare_digest for signature validation. Evidence: Verification is performed on the raw request body before JSON parsing, ensuring integrity as per ShipHero documentation.
[EXTERNAL_DOWNLOADS]: Documentation recommends the use of hookdeck-cli for local development. Evidence: README files in examples/ and references/setup.md suggest using npx hookdeck-cli to tunnel webhooks. This is an official tool from the vendor (Hookdeck).

shiphero-webhooks